attack.t1563.002 | Detection.FYI

Suspicious RDP Redirect Using TSCON
May 17, 2023 · attack.lateral_movement attack.t1563.002 attack.t1021.001 car.2013-07-002 ·
Share on:
Detects a suspicious RDP session redirect using tscon.exe

Read More
Potential MSTSC Shadowing Activity
Feb 5, 2023 · attack.lateral_movement attack.t1563.002 ·
Share on:
Detects RDP session hijacking by using MSTSC shadowing

Read More